Skip to content

Commit 52828fb

Browse files
Merge branch 'main' into chore/banned-language-ledger
2 parents 81c6ce6 + c8dbf10 commit 52828fb

37 files changed

Lines changed: 367 additions & 63 deletions

.github/workflows/actions.lock

Lines changed: 268 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,268 @@
1+
# This file is machine-generated by `gh actions-lock`.
2+
# Do not edit by hand; run `gh actions-lock` to update.
3+
# Docs: https://gh.io/actions-lockfile
4+
version: 'v0.0.2'
5+
workflows:
6+
'.github/workflows/boj-build.yml':
7+
- 'actions/checkout@v4.1.7'
8+
'.github/workflows/cargo-audit.yml':
9+
- 'actions/checkout@v4.1.1'
10+
'.github/workflows/casket-pages.yml':
11+
- 'actions/cache@v4.3.0'
12+
- 'actions/checkout@v4.1.1'
13+
- 'actions/configure-pages@v5.0.0'
14+
- 'actions/deploy-pages@v4.0.5'
15+
- 'actions/upload-pages-artifact@v3.0.1'
16+
- 'haskell-actions/setup@v2.7.5'
17+
'.github/workflows/cflite_batch.yml':
18+
- 'google/clusterfuzzlite@v1'
19+
'.github/workflows/cflite_pr.yml':
20+
- 'google/clusterfuzzlite@v1'
21+
'.github/workflows/codeql.yml':
22+
- 'actions/checkout@v6.0.2'
23+
- 'github/codeql-action@v4.34.0'
24+
'.github/workflows/dependabot-automerge.yml':
25+
- 'dependabot/fetch-metadata@v2.2.0'
26+
'.github/workflows/dogfood-gate.yml':
27+
- 'actions/checkout@v4.3.1'
28+
- 'hyperpolymath/a2ml-ecosystem@main'
29+
- 'hyperpolymath/k9-ecosystem@main'
30+
'.github/workflows/generator-generic-ossf-slsa3-publish.yml':
31+
- 'actions/checkout@v6.0.1'
32+
'.github/workflows/ghcr-publish.yml':
33+
- 'actions/checkout@v6.0.1'
34+
'.github/workflows/instant-sync.yml':
35+
- 'peter-evans/repository-dispatch@v3.0.0'
36+
'.github/workflows/pages.yml':
37+
- 'actions/checkout@v4.4.0'
38+
- 'actions/deploy-pages@v4.0.5'
39+
- 'actions/upload-pages-artifact@v3.0.1'
40+
'.github/workflows/publish-aur.yml':
41+
- 'actions/checkout@v6.0.1'
42+
- 'ksxgithub/github-actions-deploy-aur@v3.0.1'
43+
'.github/workflows/publish-chocolatey.yml':
44+
- 'actions/checkout@v6.0.1'
45+
'.github/workflows/publish-container.yml':
46+
- 'actions/attest-build-provenance@v2.4.0'
47+
- 'actions/checkout@v6.0.1'
48+
- 'docker/build-push-action@v6.9.0'
49+
- 'docker/login-action@v3.3.0'
50+
- 'docker/metadata-action@v5.5.1'
51+
'.github/workflows/publish-copr.yml':
52+
- 'actions/checkout@v6.0.1'
53+
'.github/workflows/publish-debian-ppa.yml':
54+
- 'actions/checkout@v6.0.1'
55+
'.github/workflows/publish-flatpak.yml':
56+
- 'actions/checkout@v6.0.1'
57+
'.github/workflows/publish-homebrew.yml':
58+
- 'actions/checkout@v6.0.1'
59+
'.github/workflows/publish-macports.yml':
60+
- 'actions/checkout@v6.0.1'
61+
'.github/workflows/publish-nixpkgs.yml':
62+
- 'actions/checkout@v6.0.1'
63+
- 'cachix/install-nix-action@v30'
64+
'.github/workflows/publish-obs.yml':
65+
- 'actions/checkout@v6.0.1'
66+
'.github/workflows/publish-packages.yml':
67+
- 'peter-evans/repository-dispatch@v3.0.0'
68+
'.github/workflows/publish-scoop.yml':
69+
- 'actions/checkout@v6.0.1'
70+
'.github/workflows/publish-winget.yml':
71+
- 'actions/checkout@v6.0.1'
72+
'.github/workflows/push-email-notify.yml':
73+
- 'dawidd6/action-send-mail@v3.12.0'
74+
'.github/workflows/release.yml':
75+
- 'actions/attest-build-provenance@v2.4.0'
76+
- 'actions/checkout@v6.0.1'
77+
- 'actions/download-artifact@v4.1.8'
78+
- 'actions/setup-node@v4.0.2'
79+
- 'actions/upload-artifact@v4.6.2'
80+
- 'dtolnay/rust-toolchain@master'
81+
- 'goto-bus-stop/setup-zig@v2.2.1'
82+
- 'softprops/action-gh-release@v2.2.1'
83+
'.github/workflows/stress-test.yml': []
84+
'.github/workflows/workflow-linter.yml':
85+
- 'actions/checkout@v4.1.1'
86+
'.github/workflows/zig-ffi.yml':
87+
- 'actions/cache@v4.3.0'
88+
- 'actions/checkout@v6.0.1'
89+
- 'actions/upload-artifact@v4.6.2'
90+
- 'denoland/setup-deno@v1.5.2'
91+
- 'dtolnay/rust-toolchain@master'
92+
- 'goto-bus-stop/setup-zig@v2.2.1'
93+
dependencies:
94+
'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01':
95+
ref: 'predicate@1.1.5'
96+
commit: 'sha1-1176ef556905f349f669722abf30bce1a6e16e01'
97+
owner_id: 44036562
98+
repo_id: 760702757
99+
'actions/attest-build-provenance@v2.4.0':
100+
ref: 'v2.4.0'
101+
commit: 'sha1-e8998f949152b193b063cb0ec769d69d929409be'
102+
owner_id: 44036562
103+
repo_id: 760702757
104+
uses:
105+
- 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01'
106+
- 'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
107+
'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc':
108+
ref: 'v2.4.0'
109+
commit: 'sha1-ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
110+
owner_id: 44036562
111+
repo_id: 760701061
112+
'actions/cache@v4.3.0':
113+
ref: 'v4.3.0'
114+
commit: 'sha1-0057852bfaa89a56745cba8c7296529d2fc39830'
115+
owner_id: 44036562
116+
repo_id: 215566462
117+
'actions/checkout@v4.1.1':
118+
ref: 'v4.1.1'
119+
commit: 'sha1-b4ffde65f46336ab88eb53be808477a3936bae11'
120+
owner_id: 44036562
121+
repo_id: 197814629
122+
'actions/checkout@v4.1.7':
123+
ref: 'v4.1.7'
124+
commit: 'sha1-692973e3d937129bcbf40652eb9f2f61becf3332'
125+
owner_id: 44036562
126+
repo_id: 197814629
127+
'actions/checkout@v4.3.1':
128+
ref: 'v4.3.1'
129+
commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5'
130+
owner_id: 44036562
131+
repo_id: 197814629
132+
'actions/checkout@v4.4.0':
133+
ref: 'v4.4.0'
134+
commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262'
135+
owner_id: 44036562
136+
repo_id: 197814629
137+
'actions/checkout@v6.0.1':
138+
ref: 'v6.0.1'
139+
commit: 'sha1-8e8c483db84b4bee98b60c0593521ed34d9990e8'
140+
owner_id: 44036562
141+
repo_id: 197814629
142+
'actions/checkout@v6.0.2':
143+
ref: 'v6.0.2'
144+
commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd'
145+
owner_id: 44036562
146+
repo_id: 197814629
147+
'actions/configure-pages@v5.0.0':
148+
ref: 'v5.0.0'
149+
commit: 'sha1-983d7736d9b0ae728b81ab479565c72886d7745b'
150+
owner_id: 44036562
151+
repo_id: 513659658
152+
'actions/deploy-pages@v4.0.5':
153+
ref: 'v4.0.5'
154+
commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
155+
owner_id: 44036562
156+
repo_id: 438112499
157+
'actions/download-artifact@v4.1.8':
158+
ref: 'v4.1.8'
159+
commit: 'sha1-fa0a91b85d4f404e444e00e005971372dc801d16'
160+
owner_id: 44036562
161+
repo_id: 192626254
162+
'actions/setup-node@v4.0.2':
163+
ref: 'v4.0.2'
164+
commit: 'sha1-60edb5dd545a775178f52524783378180af0d1f8'
165+
owner_id: 44036562
166+
repo_id: 189476904
167+
'actions/upload-artifact@v4':
168+
ref: 'v4'
169+
commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
170+
owner_id: 44036562
171+
repo_id: 192625955
172+
'actions/upload-artifact@v4.6.2':
173+
ref: 'v4.6.2'
174+
commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
175+
owner_id: 44036562
176+
repo_id: 192625955
177+
'actions/upload-pages-artifact@v3.0.1':
178+
ref: 'v3.0.1'
179+
commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa'
180+
owner_id: 44036562
181+
repo_id: 496012378
182+
uses:
183+
- 'actions/upload-artifact@v4'
184+
'cachix/install-nix-action@v30':
185+
ref: 'v30'
186+
commit: 'sha1-08dcb3a5e62fa31e2da3d490afc4176ef55ecd72'
187+
owner_id: 36824654
188+
repo_id: 212301524
189+
'dawidd6/action-send-mail@v3.12.0':
190+
ref: 'v3.12.0'
191+
commit: 'sha1-6e502825a508b867ab2954ad6343b68787624c01'
192+
owner_id: 9713907
193+
repo_id: 222439721
194+
'denoland/setup-deno@v1.5.2':
195+
ref: 'v1.5.2'
196+
commit: 'sha1-11b63cf76cfcafb4e43f97b6cad24d8e8438f62d'
197+
owner_id: 42048915
198+
repo_id: 356423100
199+
'dependabot/fetch-metadata@v2.2.0':
200+
ref: 'v2.2.0'
201+
commit: 'sha1-dbb049abf0d677abbd7f7eee0375145b417fdd34'
202+
owner_id: 27347476
203+
repo_id: 371068214
204+
'docker/build-push-action@v6.9.0':
205+
ref: 'v6.9.0'
206+
commit: 'sha1-4f58ea79222b3b9dc2c8bbdd6debcef730109a75'
207+
owner_id: 5429470
208+
repo_id: 241092383
209+
'docker/login-action@v3.3.0':
210+
ref: 'v3.3.0'
211+
commit: 'sha1-9780b0c442fbb1117ed29e0efdff1e18412f7567'
212+
owner_id: 5429470
213+
repo_id: 287743349
214+
'docker/metadata-action@v5.5.1':
215+
ref: 'v5.5.1'
216+
commit: 'sha1-8e5442c4ef9f78752691e2d8f8d19755c6f78e81'
217+
owner_id: 5429470
218+
repo_id: 306769011
219+
'dtolnay/rust-toolchain@master':
220+
ref: 'master'
221+
commit: 'sha1-0b1efabc08b657293548b77fb76cc02d26091c7e'
222+
owner_id: 1940490
223+
repo_id: 260749683
224+
'github/codeql-action@v4.34.0':
225+
ref: 'v4.34.0'
226+
commit: 'sha1-c6f931105cb2c34c8f901cc885ba1e2e259cf745'
227+
owner_id: 9919
228+
repo_id: 259445878
229+
'google/clusterfuzzlite@v1':
230+
ref: 'v1'
231+
commit: 'sha1-884713a6c30a92e5e8544c39945cd7cb630abcd1'
232+
owner_id: 1342004
233+
repo_id: 400046858
234+
'goto-bus-stop/setup-zig@v2.2.1':
235+
ref: 'v2.2.1'
236+
commit: 'sha1-abea47f85e598557f500fa1fd2ab7464fcb39406'
237+
owner_id: 1006268
238+
repo_id: 212984112
239+
'haskell-actions/setup@v2.7.5':
240+
ref: 'v2.7.5'
241+
commit: 'sha1-ec49483bfc012387b227434aba94f59a6ecd0900'
242+
owner_id: 75048950
243+
repo_id: 623796603
244+
'hyperpolymath/a2ml-ecosystem@main':
245+
ref: 'main'
246+
commit: 'sha1-aa4b836bd969df2bc58128cb8e3d20bbc88d5e79'
247+
owner_id: 6759885
248+
repo_id: 1275649586
249+
'hyperpolymath/k9-ecosystem@main':
250+
ref: 'main'
251+
commit: 'sha1-89f3c2702f4f650a92aa7411502f38da06abd562'
252+
owner_id: 6759885
253+
repo_id: 1275650185
254+
'ksxgithub/github-actions-deploy-aur@v3.0.1':
255+
ref: 'v3.0.1'
256+
commit: 'sha1-a97f56a8425a7a7f3b8c58607f769c69b089cadb'
257+
owner_id: 11488886
258+
repo_id: 261159912
259+
'peter-evans/repository-dispatch@v3.0.0':
260+
ref: 'v3.0.0'
261+
commit: 'sha1-ff45666b9427631e3450c54a1bcbee4d9ff4d7c0'
262+
owner_id: 18365890
263+
repo_id: 220359305
264+
'softprops/action-gh-release@v2.2.1':
265+
ref: 'v2.2.1'
266+
commit: 'sha1-c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda'
267+
owner_id: 2242
268+
repo_id: 204253808

.github/workflows/boj-build.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: BoJ Server Build Trigger
34
on:
45
push:

.github/workflows/cargo-audit.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
# Prevention workflow - audits Rust dependencies for vulnerabilities
34
name: Cargo Audit
45

@@ -22,7 +23,7 @@ jobs:
2223
runs-on: ubuntu-latest
2324
timeout-minutes: 15
2425
steps:
25-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
26+
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
2627

2728
- name: Install cargo-audit
2829
run: cargo install cargo-audit --locked
@@ -42,7 +43,7 @@ jobs:
4243
permissions:
4344
issues: write
4445
steps:
45-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
46+
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
4647

4748
- name: Create vulnerability issue
4849
env:

.github/workflows/casket-pages.yml

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: GitHub Pages
34

45
on:
@@ -21,22 +22,22 @@ jobs:
2122
timeout-minutes: 15
2223
steps:
2324
- name: Checkout
24-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
25+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
2526

2627
- name: Checkout casket-ssg
27-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
28+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
2829
with:
2930
repository: hyperpolymath/casket-ssg
3031
path: .casket-ssg
3132

3233
- name: Setup GHCup
33-
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
34+
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2.7.5
3435
with:
3536
ghc-version: '9.8.2'
3637
cabal-version: '3.10'
3738

3839
- name: Cache Cabal
39-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
40+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
4041
with:
4142
path: |
4243
~/.cabal/packages
@@ -98,10 +99,10 @@ jobs:
9899
touch ../_site/.nojekyll
99100
100101
- name: Setup Pages
101-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
102+
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
102103

103104
- name: Upload artifact
104-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
105+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
105106
with:
106107
path: '_site'
107108

@@ -115,4 +116,4 @@ jobs:
115116
steps:
116117
- name: Deploy to GitHub Pages
117118
id: deployment
118-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
119+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5

.github/workflows/cflite_batch.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: ClusterFuzzLite batch fuzzing
34
on:
45
schedule:

.github/workflows/cflite_pr.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: ClusterFuzzLite PR fuzzing
34
on:
45
pull_request:

.github/workflows/codeql.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
name: CodeQL Security Analysis
34

45
on:
@@ -39,12 +40,12 @@ jobs:
3940
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4041

4142
- name: Initialize CodeQL
42-
uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
43+
uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4.34.0
4344
with:
4445
languages: ${{ matrix.language }}
4546
build-mode: ${{ matrix.build-mode }}
4647

4748
- name: Perform CodeQL Analysis
48-
uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
49+
uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4.34.0
4950
with:
5051
category: "/language:${{ matrix.language }}"

.github/workflows/dependabot-automerge.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
# SPDX-License-Identifier: MPL-2.0
2+
# This workflow is managed by gh actions-lock.
23
#
34
# dependabot-automerge.yml — enable GitHub's native auto-merge on
45
# Dependabot pull requests that match a declared severity / ecosystem

0 commit comments

Comments
 (0)